JaffaCakes118_2064e07450b306b407a72aeeeae45f73b14aaf884813cc6edd14be93a8584321 | Triage

Sharing

General

Target

JaffaCakes118_2064e07450b306b407a72aeeeae45f73b14aaf884813cc6edd14be93a8584321
Size

1.7MB
MD5

1c7550615d9bde5f1b4ebb57253dc4ea
SHA1

812bb98772d23df765c78de5941ac1cafc9038f6
SHA256

2064e07450b306b407a72aeeeae45f73b14aaf884813cc6edd14be93a8584321
SHA512

b2b0a68bc033c2256997ccbf10098c7c2341e9ee4622f1a12273a9ed6595b28b5053108a04f14c9b720d403c0649960273beaa86f3959c20bdb01d6547ab804c
SSDEEP

1536:sjkUHInOKVU9vFhgD6wK1LhsfAWs/g9UhwtV/IeQ/HQljEqt:sjFiDgL+C/3hwXfuwJt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_2064e07450b306b407a72aeeeae45f73b14aaf884813cc6edd14be93a8584321

Files

JaffaCakes118_2064e07450b306b407a72aeeeae45f73b14aaf884813cc6edd14be93a8584321
.dll windows:6 windows x86 arch:x86

c131e7ab95b6cc6ff4c2379d5b0fc4ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
WaitForSingleObject
DeleteCriticalSection
CreateFileA
InitializeCriticalSection
WaitForMultipleObjects
GetLastError
WideCharToMultiByte
EnterCriticalSection
GetProcAddress
LoadLibraryA

user32

GetWindowThreadProcessId
PostThreadMessageW
SetTimer
CreateWindowExW
PostMessageW

Exports

Exports

HorekGlepW

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ